EMCSSL GUIDE


Creating an SSL certificate to log in to EMCSSL sites

This article will guide you through step by step instructions for creating a new certificate and using it to log in to the Emercoin mining pool. You can read more about the technology and possibilities of Emercoin's EMCSSL here.


Installing the wallet

To begin we need the Emercoin client. You can download the wallet from the official Emercoin site. The wallet will take some time to synchronize with the network. While the wallet downloads information about the blocks, you can go to the next step.

Preparation of coins

An Emercoin transaction must be made in order for a new certificate to be created in the network. The cost of the transaction is about 0.3 EMC which is very little at the current rate, but if you don't own any, you will need to start by getting some EMC. I have used the exchange cryptopia.co.nz to buy EMC. You can also ask for a few coins from developers by sending your wallet address to them directly.

Create InfoCard

InfoCard is a kind of 'business card system on the blockchain' that contains information about its owner, such as email address, phone number, date of birth and so on. InfoCard can be used on sites with emcssl authorization to automatically populate account details, i.e. rather than entering personal details every time you create a new online account, you can present your InfoCard virtual business card just once. The InfoCard step is optional and may be skipped, but if you would like to share some info about yourself, you can do it easily::

1. Download the necessary scripts.
I use OSX, so I downloaded Toolkit for Unix-like OS. Windows users can download this.

2. Next, rename the file in infocard_example.info to infocard_<your_login_name>.info and change the data to your own. If you prefer not to provide data for some things, just remove the line.
Sample data:

Alias superabdul # Short name (username, login)
FirstName Abdul # First (short) name
LastName Kurbashi Bey # Remain part of full name
HomeAddress
Sinan Pasa Mah. Hayrettin Iskelesi # Free form address
Sok. No \#1 # Free form address
Besiktas, Besiktas # Free form address
Istanbul # City
34353 # ZIP code
Turkey # Country
HomePhone +90-555-123-4567
WorkPhone +90-555-123-4568
CellPhone +90-555-123-4569
Gender M
Birthdate 1991-05-27 # May, 27, 1991
Email [email protected]
WEB http://www.bubbleinflators.com/superabdul
Facebook Abdul.KurbashiBey
Twitter AbdulKurbashiBey
EMC EdvJ7b7zPL6gj5f8VNfX6zmVcftb35sKX2 # Emercoin payment address
BTC 1MkKuU78bikC2ACLspofQZnNb6Vz9AP1Np # BitCoin payment address

3. Go to the folder and run X509 info_crypt.sh

cd downloads/X509
./info_crypt.sh infocard_<your_login_name>.info

In Windows, run by double-clicking the file info_crypt.bat and enter the InfoCard name:

info_crypt.bat

If all goes well, the output will contain a message like this:

Please, deposit into Emercoin NVS pair:
Key: info:e120319a479f4ac4
Value: body of the file: infocard_<your_login_name>.info.ze

To link your EMCSSL certificate to this info file, run ./gen_tpl.sh and use value for UID: info: e120319a479f4ac4: ac7c3821f171b6a8bd8cd33d829f5b

Please note that this information is not stored anywhere, so it is advisable to keep a record in a text document.

4. The next step is to import the business card to the network. To do this, open your wallet and go to the tab Manage Names.
In the Name box, copy our Key, info: e120319a479f4ac4
In the Value field, paste the contents of the file *.ze, which should be in the scripts folder. The contents of the file will look like gibberish - and should, this is normal.
New address field should be left blank.

Wallet Appearance

Click submit and you're done.
Now you can go to the next step - generate your own certificate to be used for password-free login.

Template Generation

To generate a template, the script gen_tpl.sh is used, which is in the same bundle as the InfoCard.
Unpack the archive with the script, open a terminal and go to the folder X509:

cd downloads/X509

Run gen_tpl.sh:

./gen_tpl.sh

In Windows, run gen_tpl.bat

gen_tpl.bat

The program prompts you to enter the data to be used for the certificate:
CommonName - login (username). The only required parameter.
Email - your mail, leave this empty.
UID - a reference to additional information about the owner of the certificate, such as InfoCard.
If you created InfoCard, enter the UID data:

info: e120319a479f4ac4: ac7c3821f171b6a8bd8cd33d829f5b

which were obtained when generating the *.ze file (item 3 of the previous section).

If all goes well, you will see the following entry:

Created EMCSSL Certificate template: ceabec4544e2ab86.tpl

Certificate generation

Now we need to run the script gen_crt.sh with the obtained parameter:

./gen_crt.sh ceabec4544e2ab86.tpl

In Windows, run gen_crt.bat

gen_crt.bat

The script asks you to enter a password to import the certificate into the browser. You must enter a password and confirm it. Then you will see the message:

Please, deposit into Emercoin NVS pair:
Key: ssl:ceabec4544e2ab86
Value: sha256=2c2de184a316be17d8170312bca336a22bfda97d10f56d4127ca31d0253d8097

Open the wallet tab Manage Names and copy Key into the Name field and Value in the Value field, and click Submit.
The New address field should be left blank.

Send data to the network

Import the certificate into the browser

Now the certificate obtained in the previous section (and which should appear in the folder with the script) is to be imported into the browser. The certificate has the extension *.p12

OSX users should just double click on the file. This opens Keychain Access and asks you to enter the password you gave when generating the certificate.

For other operating systems, everything happens similarly. Importing a certificate doesn't differ from normal client SSL-certificates, and is done through the appropriate setup menu of the browser. Here are guidelines for some common browsers: Firefox, Chrome, IE.

Verifying the certificate

You can check the operation of the certificate in the Emercoin pool.
To get started, click here.
If you see something like this, it means everything is in order:

pid=30275
main: SSL-certificate presented

SerialNo: FD493EAEEA64B563
Currency: EMC
CommName: kamillo
e-Mail : [email protected]
InfoCard:

emcssl_validate() RETURNED: $EX4WHi2ABUkinKX6jACUxanhMqDYbbcyEj

Now go to the registration page of the pool and click Register with emcssl. The system should tell us that the registration was successful.
Then click Login with emcssl to authorize yourself on the site.

As you can see, it's not complicated. If you have questions, be sure to ask.